ROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEX

BigBlue1 · 9 April 2020, 10:15 PM

Not sure where to post.
I was contacted about my 1803 President for sale by user : Bluemartinfan by email.
I was sent an email by the user saying they were interested.
I contacted them via text,email and PM.
Received a text saying they were not interested.
Then received a PM from Russ saying he was not actively looking.

This morning I receive an email that say the following.

Please be careful as when you click on the link it is trying to make you enter your username and password.

Kingface66 · 9 April 2020, 10:25 PM

Scam

AJMarcus · 9 April 2020, 10:46 PM

Looks like fraud, sounds like fraud, and smells like fraud. Report these scumbags.

barneb10 · 9 April 2020, 10:47 PM

Definitely a suspicious email, but the attached link's domain name looks like the real one.

Edit: can you view the email in plain text? I'm thinking if its a scam (most likely is), that there is a hyperlink embedded in the text making the link look like its from TRF but redirects your to a phishing site.

rmagoo57 · 9 April 2020, 10:48 PM

Block the number and delete message.

77T · 9 April 2020, 11:16 PM

Quote:

Originally Posted by BigBlue1

Not sure where to post.

I was contacted about my 1803 President for sale by user : Bluemartinfan by email.

I was sent an email by the user saying they were interested.

I contacted them via text,email and PM.

Received a text saying they were not interested.

Then received a PM from Russ saying he was not actively looking.

This morning I receive an email that say the following.

Please be careful as when you click on the link it is trying to make you enter your username and password.

I would copy your entire post here in Vintage and paste it into a new thread in the WatchOut section.

Or ask a Mod to move this entire thread to WatchOut.

The scammer may have been targeting your 1803, but he’ll likely target other seller’s listings in many sections. That’s why broader coverage is better by appearing in WatchOut. That’s where members go to check out problems.

Sent from my iPhone using Tapatalk Pro

cop414 · 10 April 2020, 12:22 AM

Moved to watch out, how about a screen name for this guy?

BigBlue1 · 10 April 2020, 12:24 AM

Quote:

Originally Posted by cop414

Moved to watch out, how about a screen name for this guy?

Tim,

Bluemartinfan

https://www.rolexforums.com/member.php?u=13851

cop414 · 10 April 2020, 12:28 AM

Got it, banned. I had missed a letter when I was searching for him. I’d log out and reset your password since you clicked on the link. Did you log in from the link? If you did your account has been compromised.

Dr.Smellody · 10 April 2020, 12:33 AM

Soooooo scary

sp006 · 10 April 2020, 01:20 AM

Just received same email from this person. Thank you for the head's up!

Sent from my iPhone using Tapatalk

TimeLord2 · 10 April 2020, 02:01 AM

Holy crap BB1! I would hate to see you lose that lovely watch to some douche bag! Well played…

zruvalcaba · 10 April 2020, 02:55 AM

Received the exact same email. Login page looks like a TRF login page. Enter your credentials are you're hooked. Beward.

77T · 10 April 2020, 06:37 AM

Quote:

Originally Posted by cop414

Moved to watch out, how about a screen name for this guy?

Quote:

Originally Posted by cop414

Got it, banned. I had missed a letter when I was searching for him. I’d log out and reset your password since you clicked on the link. Did you log in from the link? If you did your account has been compromised.

Thanks for moving it Tim and jumping on the account. Is it possible Bluemartinfan himself unknowingly clicked on a similar phishing email?

I know that’s hard to tell, but if his previous history was seemingly normal, then phishing could have snagged him too.

Sent from my iPhone using Tapatalk Pro

TudorBeast · 10 April 2020, 06:50 AM

Yeap, same thing happened to me. Be careful out there guys!!

BigBlue1 · 10 April 2020, 07:17 AM

sweet

cop414 · 10 April 2020, 10:56 AM

Quote:

Originally Posted by 77T

Thanks for moving it Tim and jumping on the account. Is it possible Bluemartinfan himself unknowingly clicked on a similar phishing email?

I know that’s hard to tell, but if his previous history was seemingly normal, then phishing could have snagged him too.

Sent from my iPhone using Tapatalk Pro

Paul, more likely than not that’s what happened.

roadie1 · 10 April 2020, 11:09 AM

I got the same email for one I have in the for sale section. His handle was: terrifiedlover

CMSgt Bo · 18 April 2020, 04:02 PM

Quote:

Originally Posted by cop414

Paul, more likely than not that’s what happened.

No, he's been using that username (both bluemartinfan and b1uemartinfan) since at least June 2016 when he was banned over on WUS.

cop414 · 18 April 2020, 09:33 PM

Thanks for the info Bo.

michael067 · 19 April 2020, 02:45 PM

9 April 2020, 10:15 PM	#1
BigBlue1 2024 ROLEX DATEJUST41 Pledge Member Join Date: Feb 2018 Real Name: Webmaster Location: Space Watch: it pal ! Posts: 2,955	Look Immediately Not sure where to post. I was contacted about my 1803 President for sale by user : Bluemartinfan by email. I was sent an email by the user saying they were interested. I contacted them via text,email and PM. Received a text saying they were not interested. Then received a PM from Russ saying he was not actively looking. This morning I receive an email that say the following. Please be careful as when you click on the link it is trying to make you enter your username and password. __________________ " Even I don't wake up looking like Cindy Crawford". Cindy Crawford Hypochondria is the only disease I haven't got RIP Mikey

9 April 2020, 10:47 PM	#4
barneb10 "TRF" Member Join Date: Sep 2019 Location: USA Posts: 379	Definitely a suspicious email, but the attached link's domain name looks like the real one. Edit: can you view the email in plain text? I'm thinking if its a scam (most likely is), that there is a hyperlink embedded in the text making the link look like its from TRF but redirects your to a phishing site. Last edited by barneb10; 9 April 2020 at 10:50 PM.. Reason: added content

10 April 2020, 12:22 AM	#7
cop414 TRF Moderator & 2024 DATE-JUST41 Patron Join Date: Apr 2012 Real Name: Tim Location: Pennsylvania Watch: 14060M Posts: 71,824	Moved to watch out, how about a screen name for this guy? __________________ Rolex Submariner 14060M Omega Seamaster 2254.50 DOXA Professional 1200T Card carrying member of TRF's Global Association of Retro-Grouch-Curmudgeons TRF's "After Dark" Bar & NightClub Patron P Club Member #17 2 FA ENABLED

10 April 2020, 12:28 AM	#9
cop414 TRF Moderator & 2024 DATE-JUST41 Patron Join Date: Apr 2012 Real Name: Tim Location: Pennsylvania Watch: 14060M Posts: 71,824	Got it, banned. I had missed a letter when I was searching for him. I’d log out and reset your password since you clicked on the link. Did you log in from the link? If you did your account has been compromised. __________________ Rolex Submariner 14060M Omega Seamaster 2254.50 DOXA Professional 1200T Card carrying member of TRF's Global Association of Retro-Grouch-Curmudgeons TRF's "After Dark" Bar & NightClub Patron P Club Member #17 2 FA ENABLED

10 April 2020, 07:17 AM	#16
BigBlue1 2024 ROLEX DATEJUST41 Pledge Member Join Date: Feb 2018 Real Name: Webmaster Location: Space Watch: it pal ! Posts: 2,955	sweet __________________ " Even I don't wake up looking like Cindy Crawford". Cindy Crawford Hypochondria is the only disease I haven't got RIP Mikey

9 April 2020, 10:25 PM	#2
Kingface66 2024 Pledge Member Join Date: Aug 2013 Location: The Empire State Watch: 1966 Rolex 5513 Posts: 3,414	Scam

9 April 2020, 10:46 PM	#3
AJMarcus "TRF" Member Join Date: Nov 2010 Real Name: AJ Location: USA Watch: Swiss Posts: 5,205	Looks like fraud, sounds like fraud, and smells like fraud. Report these scumbags.

9 April 2020, 10:48 PM	#5
rmagoo57 2024 ROLEX DATEJUST41 Pledge Member Join Date: Oct 2019 Real Name: Ron Location: Detroitish Watch: GMT II/Sub/Exp II Posts: 2,328	Block the number and delete message.

10 April 2020, 12:33 AM	#10
Dr.Smellody "TRF" Member Join Date: Apr 2014 Location: Salem, OR Posts: 5,193	Soooooo scary

10 April 2020, 01:20 AM	#11
sp006 "TRF" Member Join Date: Feb 2020 Location: New York Posts: 699	Just received same email from this person. Thank you for the head's up! Sent from my iPhone using Tapatalk

10 April 2020, 02:01 AM	#12
TimeLord2 2024 ROLEX DATEJUST41 Pledge Member Join Date: Jan 2019 Location: Valencia, CA Watch: GMT Master 1675/3 Posts: 2,045	Holy crap BB1! I would hate to see you lose that lovely watch to some douche bag! Well played…

10 April 2020, 02:55 AM	#13
zruvalcaba "TRF" Member Join Date: Jun 2019 Real Name: Zak Location: Temecula, CA Posts: 247	Received the exact same email. Login page looks like a TRF login page. Enter your credentials are you're hooked. Beward.

10 April 2020, 06:50 AM	#15
TudorBeast Banned Join Date: Mar 2014 Location: PNW USA Watch: 114060 Posts: 516	Yeap, same thing happened to me. Be careful out there guys!!

10 April 2020, 11:09 AM	#18
roadie1 2024 Pledge Member Join Date: Nov 2007 Location: Southeast Watch: Divers, GMT Posts: 2,144	I got the same email for one I have in the for sale section. His handle was: terrifiedlover

18 April 2020, 09:33 PM	#20
cop414 TRF Moderator & 2024 DATE-JUST41 Patron Join Date: Apr 2012 Real Name: Tim Location: Pennsylvania Watch: 14060M Posts: 71,824	Thanks for the info Bo. __________________ Rolex Submariner 14060M Omega Seamaster 2254.50 DOXA Professional 1200T Card carrying member of TRF's Global Association of Retro-Grouch-Curmudgeons TRF's "After Dark" Bar & NightClub Patron P Club Member #17 2 FA ENABLED

19 April 2020, 02:45 PM	#21
michael067 Banned Join Date: Feb 2016 Real Name: Mike Location: Las Vegas Watch: TT DJ 16233 Posts: 1,002

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)